Directory sync: LDAP query: How to exclude directory entries without Lastname?


#1

The lastname is required for each created user in WorkflowGen.
By default the Lastname field is mapped to the “sn” LDAP attributes.
You may have some directory entries without lastname (e.g: service accounts).

To exclude those entries you just have to add the following parameters in your LDAP query:

(&(objectCategory=person)(objectClass=user)(sn=*)(sAMAccountName=*))

“sAMAccountName” is also required to exclude directory entries without usernames.